summaryrefslogtreecommitdiffstats
path: root/sepolicy
diff options
context:
space:
mode:
authorWolfgang Wiedmeyer <wolfgit@wiedmeyer.de>2016-02-16 17:32:25 +0100
committerWolfgang Wiedmeyer <wolfgit@wiedmeyer.de>2016-02-16 17:32:25 +0100
commitcd25e765552632d6ba1126d668052e970c97fad5 (patch)
tree3ba46a6ba06febe606f7a324cfc213649bba33c1 /sepolicy
parent49500810a780450a0d882605aa4a28dc35c20949 (diff)
downloadvendor_replicant-cd25e765552632d6ba1126d668052e970c97fad5.zip
vendor_replicant-cd25e765552632d6ba1126d668052e970c97fad5.tar.gz
vendor_replicant-cd25e765552632d6ba1126d668052e970c97fad5.tar.bz2
sepolicy: allow bootanim and surfaceflinger execmem and access to ashmem
This allows the device to boot with software rendering using build/target/board/generic/sepolicy as reference Signed-off-by: Wolfgang Wiedmeyer <wolfgit@wiedmeyer.de>
Diffstat (limited to 'sepolicy')
-rw-r--r--sepolicy/bootanim.te2
-rw-r--r--sepolicy/surfaceflinger.te2
2 files changed, 4 insertions, 0 deletions
diff --git a/sepolicy/bootanim.te b/sepolicy/bootanim.te
index 164231b..8739a87 100644
--- a/sepolicy/bootanim.te
+++ b/sepolicy/bootanim.te
@@ -1,3 +1,5 @@
# Themed resources (bootanimation)
allow bootanim theme_data_file:dir search;
allow bootanim theme_data_file:file r_file_perms;
+allow bootanim self:process execmem;
+allow bootanim ashmem_device:chr_file execute; \ No newline at end of file
diff --git a/sepolicy/surfaceflinger.te b/sepolicy/surfaceflinger.te
new file mode 100644
index 0000000..4c35469
--- /dev/null
+++ b/sepolicy/surfaceflinger.te
@@ -0,0 +1,2 @@
+allow surfaceflinger self:process execmem;
+allow surfaceflinger ashmem_device:chr_file execute;